F-Droid: how it weakens Android's security model

Re:F-Droid: how it weakens Android's security model by upofadown on Thursday February 24, 2022 @05:19PM (#30461078)

The article links to "The PGP Problem" in an attempt to suggest that GPG signatures are bad somehow. Here are my comments on "The PGP Problem":

* https://articles.59.ca/doku.php?id=pgpfan:tpp

The article also claims that Debian has moved away from GPG signatures. This is not true.

This all seems like a pointless distraction from the point that article is attempting to make...

[ Parent | on HN ]

Re:F-Droid: how it weakens Android's security model by southerntofu on Friday February 25, 2022 @06:54AM (#30466307)

Thanks for this article, it makes very good points. In particular, about the UX of GPG, i've found Sequoia to be a very good alternative: https://sequoia-pgp.org/

[ Parent | on HN ]

Re:F-Droid: how it weakens Android's security model by Wonderfall on Thursday February 24, 2022 @08:01PM (#30462501)

There is literally a link in the article that takes you to the Debian website: https://wiki.debian.org/Teams/Apt/Spec/AptSign

I might rephrase that since they didn't technically moved away from OpenGPG (yet). It was a proposal at the time.

[ Parent | on HN ]

Re:F-Droid: how it weakens Android's security model by Wonderfall on Friday February 25, 2022 @11:00AM (#30468652)

Sorry, of course meant GPG, OpenPGP being the standard on which GPG is based on.

[ Parent | on HN ]